sync: merge changes from go 1.25.0 - #370

Open

wwqgtxx wants to merge 36 commits into

refraction-networking:masterfrom

wwqgtxx:sync-go1.25

Commits on Sep 21, 2025

crypto/tls: fix incorrect EncryptedClientHelloKey comment

rolandshoemaker
authored and
wwqgtxx
committed
64ef84c
crypto/tls: improve ech parsing errors

rolandshoemaker
authored and
wwqgtxx
committed
ab849f2
crypto/tls: reject empty TLS 1.3 session ticket

cpu
authored and
wwqgtxx
committed
7d83f3d
crypto/tls: ignore TLS 1.3 user canceled alerts

cpu
authored and
wwqgtxx
committed
158db6c
crypto/tls: align cert decode alert w/ BSSL

cpu
authored and
wwqgtxx
committed
65d84e9
crypto/tls: reject TLS 1.3 compat session ID in TLS 1.2

cpu
authored and
wwqgtxx
committed
014db04
crypto/tls: allow P-521 in FIPS 140-3 mode and Go+BoringCrypto

FiloSottile
authored and
wwqgtxx
committed
7b9f846
crypto/tls: add ConnectionState.CurveID

FiloSottile
authored and
wwqgtxx
committed
e4a8f2a
crypto/tls: clean up supported/default/allowed parameters

FiloSottile
authored and
wwqgtxx
committed
4042a9d
crypto/tls: relax native FIPS 140-3 mode

FiloSottile
authored and
wwqgtxx
committed
42bd84e
crypto/tls: fix ECH compatibility

gdy666
authored and
wwqgtxx
committed
0aa9c9a
crypto/tls: add missing RUnlock in ticketKeys

espadolini
authored and
wwqgtxx
committed
c0898e8
crypto/tls: use crypto/hkdf

qmuntal
authored and
wwqgtxx
committed
87e221c
crypto/tls: add offered cipher suites to the handshake error

drakkan
authored and
wwqgtxx
committed
ac8ebe5
crypto/tls: fix a testing deadlock that occurs on a TLS protocol error

eay
authored and
wwqgtxx
committed
ce6f0ca
crypto/tls: skip part of the test based on GOOS instead of GOARCH

nevkontakte
authored and
wwqgtxx
committed
388cb91
crypto/tls: add scheduler call to TestCertCache refcount timeout loop

mknyszek
authored and
wwqgtxx
committed
18e3125
crypto/tls: use runtime.Gosched instead of time.After in TestCertCache

mknyszek
authored and
wwqgtxx
committed
a1de1e7
crypto/tls: use illegal param alert for bad compression

cpu
authored and
wwqgtxx
committed
6e4f60b
crypto/tls: update TLS 1.3 client compression validation

cpu
authored and
wwqgtxx
committed
4951716
crypto/tls: err for unsupported point format configs

cpu
authored and
wwqgtxx
committed
adf716d
crypto/tls: fix TLS <1.3 client cert required alert

cpu
authored and
wwqgtxx
committed
0a09329
crypto/tls: handle client hello version too high

cpu
authored and
wwqgtxx
committed
ca1eae2

Commits on Dec 15, 2025

crypto/tls: add GetEncryptedClientHelloKeys

rolandshoemaker
authored and
wwqgtxx
committed
e688181
crypto/tls: have servers prefer TLS 1.3 when supported

cpu
authored and
wwqgtxx
committed
c064d0a
crypto/tls: verify server chooses advertised curve

cpu
authored and
wwqgtxx
committed
503a5a5
crypto/tls: delete dead code curveIDForCurve

cpu
authored and
wwqgtxx
committed
a9caf3d
crypto/tls: match compression method alert across versions

cpu
authored and
wwqgtxx
committed
9874f8f
crypto/tls: don't advertise TLS 1.2-only sigAlgs in TLS 1.3

FiloSottile
authored and
wwqgtxx
committed
c87464a
crypto/tls: use decode alert for handshake msg unmarshal err

cpu
authored and
wwqgtxx
committed
a8969f8
crypto/tls: reject duplicate TLS 1.3 EncryptedExtensions

cpu
authored and
wwqgtxx
committed
4181a97
crypto/tls: signature_algorithms in CertificateRequest can't be empty

FiloSottile
authored and
wwqgtxx
committed
d9aad66
crypto/tls: enable signature algorithm BoGo tests (and fix two bugs)

FiloSottile
authored and
wwqgtxx
committed
c78146d
crypto/tls: ensure the ECDSA curve matches the signature algorithm

FiloSottile
authored and
wwqgtxx
committed
6da0585
crypto/tls: empty server_name conf. ext. from server

cpu
authored and
wwqgtxx
committed
df25225

Commits on Dec 20, 2025

crypto/tls: use inner hello for earlyData when using QUIC and ECH I don't think we have good QUIC ECH tests. BoGo has some for this, but I'm not sure how easy it would be to enable those for QUIC.

rolandshoemaker
authored and
wwqgtxx
committed
96bfe4e